What we are doing

What we are doing to protect you

We know you want the convenience of banking online without constantly worrying about the security of your money and your personal information.

We take your online safety seriously, that’s why we use state of the art anti-fraud systems to identify unusual activity and a telephone challenge process to block fraudsters even in in the unlikely event that they get hold of your details.

Our online anti-fraud system

Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online. If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.

How Enhanced Internet Authentication works to prevent fraud.

When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the request is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.

Unfortunately, the phone security check isn't compatible with a Textphone. Customers with a hearing impairment can follow the onscreen instructions while the security check is in progress. If you use a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow on screen instructions. If you are unable to do this then please visit your local branch or contact us by textphone and we will arrange the payment for you.

Help us contact you

In order for the phone security check to be effective we need you to provide us with up to three phone numbers, for example work, mobile and home, as we may need to contact you to verify your activity whilst you are logged in to our online service.

It’s important that you provide as many different phone numbers as you can to make it easier for us to contact you.

Security Process

When using our Online Banking service your security is our number one priority. Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online.

What is Enhanced Internet Authentication (EIA)?

When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the instruction is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.

Why have you introduced phone security checks?

Some banks are using card readers or password tokens to generate unique passwords when customers undertake specific transactions. This involves sending customers a particular gadget that they will need to keep with them when using online banking. We believe this extra gadget is unnecessary and so have chosen a common item, such as your phone, to communicate with you during your online banking session.

If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.

We recommend you read and follow instructions about staying safe online by looking at our security help centre. There is advice about the dangers of 'phishing' emails, and about keeping anti-virus and anti-spyware software up-to-date.

What happens if I don’t supply my phone numbers?

If I update my phone number online will I be able to use this number immediately?

For security reasons, new phone numbers entered will take three days to become active.During this time we will be unable to call you on any of the numbers you have provided.You'll be directed to our phone support team who'll be able to assist you.

What happens if I do not answer the call?

If you don't answer the call or a connection can't be established, you'll have two further attempts to choose one of the phone numbers we have for you so we can contact you. If we can't reach you after three attempts we won't be able to set up your new recipient.

What should I do if my access is suspended?

Our security team will try to contact you within the next 3 hours during the working day (8am - 9pm Monday to Friday, 8am - 8pm weekends). If they can't reach you within 24 hours they'll send you a letter with further instructions.

What if I receive a call asking me to confirm a recipient I did not set up, what do I do?

You will be given two opportunities during the security check call to advise us that were not expecting the call and it’s not you trying to set up the recipient. We will then suspend your online access/accounts and our security team will contact you.

Will I need to have my phone with me every time I want to make a payment?

You don’t hold any numbers for me so how can I set up a new recipient?

Unfortunately, if we don't hold any number for you, you'll need to call us on 08457 21 31 41, 24 hours a day, 7 days a week so we can set up the new recipient for you.If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 1313 37 42 18.You must be registered for phone banking to use this service. Alternatively, you'll need to call into your local branch. Please make sure that you update your phone numbers for future.

How will the security call work for dial up users?

Can I use a Textphone to receive the phone security check?

Unfortunately, the phone security check is not compatible with a Textphone. However, customers with a hearing impairment can still receive a challenge on another phone and follow on screen instructions. If you are customer with a hearing impairment that uses a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow onscreen instructions. You can update your telephone numbers in the 'Change details' section of online.

Can I use VoIP (Voice over Internet Protocol) to receive the phone security check?

Unfortunately, VoIP technology is not compatible with our phone security check process. You'll need to use a standard phone or mobile to receive the automated call. However, most internet-enabled phones (such as the iPhone) will accept security checks while you're on online banking on your phone.

Examples of VoIP providers include Skype and Vonage. Please note that Bank of Scotland is not affiliated with these service providers.

Our online fraud guarantee

We do all we can to protect you online. Even in the unlikely event of fraud, we promise you won't lose out. As a Bank of Scotland online banking customer, you automatically benefit from our online fraud guarantee:

If you use our online service and become a victim of online fraud, we guarantee you won't lose any money from your account, and will always be reimbursed in full.

For the vast majority of our customers, this situation will never arise, especially if you take a few simple steps:

Keep your password secure and do not let anyone else make use of your security details, even if they share a joint account with you

Do not let anyone watch you enter your security details and log off after each Internet Banking session

Carry out regular virus checks on your devices and have the latest operating system and web browser installed.

Worried that your online personal or security details may have been compromised? Call 08456 02 00 00, 24 hours a day, 7 days a week.If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 113 279 8302.

Stay secure online - New security certificate

We have introduced a new feature to our online banking service, designed to give you even more confidence when using our service.

How does it work?

Extended Validation Secure Socket Layer, or EVSSL for short, means that our site has undergone many rigorous checks to confirm its validity, and has been provided with a 'certificate of authenticity' which can be recognised by your browser.

In the majority of cases, this validation is shown within your address bar, displaying a 'traffic light' style response of green, amber or red.

This feature gives you the added confidence of knowing the site you're using has been confirmed as genuine.

What will you see?

This certificate of authenticity is recognised by most browsers, though there are variations in the way the different browsers display the validation.

The majority of users running Internet Explorer versions 7 and 8 (IE7 and IE8), Mozilla Firefox 3, Opera 9.5 and Safari 3.2 will see the following 'traffic light' responses on their address bars:

Websites recognised as authenticated will display a GREEN address bar plus a padlock symbol, referencing the certificate and the authenticated website provider

Websites considered to be suspicious will display an AMBER address bar with no padlock symbol

Websites identified as fraudulent and a phishing site, or as having a revoked or expired validation certificate, will display a RED address bar

Users running Internet Explorer 6 (IE6), Mozilla Firefox 2 and Google Chrome will continue to see their standard address bar. No 'traffic light' notification will be given though authenticated websites will display a padlock symbol in the address bar.

Other browsers not mentioned above will continue to see their standard address bars

Protecting you

We know you want the convenience of banking online without constantly worrying about the security of your money and your personal information.

We take your online safety seriously, that’s why we use state of the art anti-fraud systems to identify unusual activity and a telephone challenge process to block fraudsters even in in the unlikely event that they get hold of your details.

Anti-fraud System

Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online. If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.

How Enhanced Internet Authentication works to prevent fraud.

When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the request is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.

Unfortunately, the phone security check isn't compatible with a Textphone. Customers with a hearing impairment can follow the onscreen instructions while the security check is in progress. If you use a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow on screen instructions. If you are unable to do this then please visit your local branch or contact us by textphone and we will arrange the payment for you.

Help us contact you

In order for the phone security check to be effective we need you to provide us with up to three phone numbers, for example work, mobile and home, as we may need to contact you to verify your activity whilst you are logged in to our online service.

It’s important that you provide as many different phone numbers as you can to make it easier for us to contact you.

Security Process

When using our Online Banking service your security is our number one priority. Card readers and password tokens are one security option but we use a different online anti-fraud system for customers. We're constantly improving our security to prevent online fraud and Enhanced Internet Authentication is another measure to make you even safer online.

What is Enhanced Internet Authentication (EIA)?

When you set up a new recipient, new standing order or reset your online security details, we may call you to make sure the instruction is genuine. All you need is a phone nearby. You'll be able to choose which number we call you on, provided it's a number we already hold for you. You'll receive an automated call asking you to confirm the details about your transaction and then to enter a four digit number that will appear on your computer screen into your phone keypad. The whole process takes less than a minute and you can see it on our demo.

Why have you introduced phone security checks?

Some banks are using card readers or password tokens to generate unique passwords when customers undertake specific transactions. This involves sending customers a particular gadget that they will need to keep with them when using online banking. We believe this extra gadget is unnecessary and so have chosen a common item, such as your phone, to communicate with you during your online banking session.

If a fraudster acquires your sign in details and gains access to your accounts, they are unlikely to have access to your phone as well.

We recommend you read and follow instructions about staying safe online by looking at our security help centre. There is advice about the dangers of 'phishing' emails, and about keeping anti-virus and anti-spyware software up-to-date.

What happens if I don’t supply my phone numbers?

If I update my phone number online will I be able to use this number immediately?

For security reasons, new phone numbers entered will take three days to become active.During this time we will be unable to call you on any of the numbers you have provided.You'll be directed to our phone support team who'll be able to assist you.

What happens if I do not answer the call?

If you don't answer the call or a connection can't be established, you'll have two further attempts to choose one of the phone numbers we have for you so we can contact you. If we can't reach you after three attempts we won't be able to set up your new recipient.

What should I do if my access is suspended?

Our security team will try to contact you within the next 3 hours during the working day (8am - 9pm Monday to Friday, 8am - 8pm weekends). If they can't reach you within 24 hours they'll send you a letter with further instructions.

What if I receive a call asking me to confirm a recipient I did not set up, what do I do?

You will be given two opportunities during the security check call to advise us that were not expecting the call and it’s not you trying to set up the recipient. We will then suspend your online access/accounts and our security team will contact you.

Will I need to have my phone with me every time I want to make a payment?

You don’t hold any numbers for me so how can I set up a new recipient?

Unfortunately, if we don't hold any number for you, you'll need to call us on 08457 21 31 41, 24 hours a day, 7 days a week so we can set up the new recipient for you.If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 1313 37 42 18.You must be registered for phone banking to use this service. Alternatively, you'll need to call into your local branch. Please make sure that you update your phone numbers for future.

How will the security call work for dial up users?

Can I use a Textphone to receive the phone security check?

Unfortunately, the phone security check is not compatible with a Textphone. However, customers with a hearing impairment can still receive a challenge on another phone and follow on screen instructions. If you are customer with a hearing impairment that uses a mobile to text friends and family, we recommend you include this number in the mobile section of your phone details. If security checked, you can then select your mobile number and follow onscreen instructions. You can update your telephone numbers in the 'Change details' section of online.

Can I use VoIP (Voice over Internet Protocol) to receive the phone security check?

Unfortunately, VoIP technology is not compatible with our phone security check process. You'll need to use a standard phone or mobile to receive the automated call. However, most internet-enabled phones (such as the iPhone) will accept security checks while you're on online banking on your phone.

Examples of VoIP providers include Skype and Vonage. Please note that Bank of Scotland is not affiliated with these service providers.

Online Guarantee

We do all we can to protect you online. Even in the unlikely event of fraud, we promise you won't lose out. As a Bank of Scotland online banking customer, you automatically benefit from our online fraud guarantee:

If you use our online service and become a victim of online fraud, we guarantee you won't lose any money from your account, and will always be reimbursed in full.

For the vast majority of our customers, this situation will never arise, especially if you take a few simple steps:

Keep your password secure and do not let anyone else make use of your security details, even if they share a joint account with you

Do not let anyone watch you enter your security details and log off after each Internet Banking session

Carry out regular virus checks on your devices and have the latest operating system and web browser installed.

Worried that your online personal or security details may have been compromised? Call 08456 02 00 00, 24 hours a day, 7 days a week.If you’re calling from abroad or would prefer not to use the 0845 number, you can call us on +44 (0) 113 279 8302.

Security certificates

We have introduced a new feature to our online banking service, designed to give you even more confidence when using our service.

How does it work?

Extended Validation Secure Socket Layer, or EVSSL for short, means that our site has undergone many rigorous checks to confirm its validity, and has been provided with a 'certificate of authenticity' which can be recognised by your browser.

In the majority of cases, this validation is shown within your address bar, displaying a 'traffic light' style response of green, amber or red.

This feature gives you the added confidence of knowing the site you're using has been confirmed as genuine.

What will you see?

This certificate of authenticity is recognised by most browsers, though there are variations in the way the different browsers display the validation.

The majority of users running Internet Explorer versions 7 and 8 (IE7 and IE8), Mozilla Firefox 3, Opera 9.5 and Safari 3.2 will see the following 'traffic light' responses on their address bars:

Websites recognised as authenticated will display a GREEN address bar plus a padlock symbol, referencing the certificate and the authenticated website provider

Websites considered to be suspicious will display an AMBER address bar with no padlock symbol

Websites identified as fraudulent and a phishing site, or as having a revoked or expired validation certificate, will display a RED address bar

Users running Internet Explorer 6 (IE6), Mozilla Firefox 2 and Google Chrome will continue to see their standard address bar. No 'traffic light' notification will be given though authenticated websites will display a padlock symbol in the address bar.

Other browsers not mentioned above will continue to see their standard address bars

*Links to external sites are provided as part of our commitment to making Internet Banking safe and secure. However, we cannot accept responsibility or liability for the content or availability of external sites. We cannot guarantee that any software downloaded from these sites will work, or be free from viruses or malicious code.